Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/BFECDAAC803F11EC8394C23AC4F9AE02.roa
File:                     BFECDAAC803F11EC8394C23AC4F9AE02.roa (raw, json)
Hash identifier:          pgBwoEEMrknf3aT4OROmoIE+79PWX2unMw4v1PNnUSk=
Subject key identifier:   CA:F8:94:AC:AF:65:EE:84:CC:14:F6:17:90:0D:E2:9E:DD:4E:F3:08
Certificate issuer:       /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial:       08FB
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/BFECDAAC803F11EC8394C23AC4F9AE02.roa
Signing time:             Wed 06 May 2026 20:25:28 +0000
ROA not before:           Wed 06 May 2026 20:25:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132420
IP address blocks:        103.90.240.0/22 maxlen: 24
                          2400:ffc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
                          rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2299 (0x8fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
        Validity
            Not Before: May  6 20:25:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fba3b8-be03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:05:ad:d8:bd:f7:22:ba:7c:fb:2a:5a:d8:
                    e6:54:ee:a0:63:d5:21:fc:cf:d7:25:77:81:e7:ea:
                    2d:8a:04:8b:c6:a2:d6:97:ed:63:bb:7b:bf:21:46:
                    00:6b:b0:4c:81:6a:3e:72:97:09:e8:c6:92:f5:1e:
                    82:0b:dd:ba:39:e7:db:28:9c:24:8c:5b:b5:a2:44:
                    c4:0e:b5:c9:d2:77:f8:60:f1:7e:db:f9:7d:96:49:
                    a6:0f:29:d1:86:26:44:5d:92:6e:f6:b1:b3:ca:ae:
                    0c:0c:17:19:3e:0a:a8:d2:3d:81:f9:41:b5:10:77:
                    cb:7e:88:87:ac:28:0e:3b:08:4a:25:35:e1:dd:bf:
                    7e:30:66:16:9a:9d:48:40:9f:dc:95:86:48:21:c2:
                    dd:f4:dd:0d:62:f3:d3:3d:b9:b7:3b:57:0f:6d:94:
                    79:94:1f:9f:4c:9f:4f:60:03:ae:46:50:6c:ce:b5:
                    4d:5b:98:0b:86:76:c7:95:e6:d4:85:24:92:c5:08:
                    6a:a7:e9:d0:55:f4:7e:9c:3a:68:f8:d3:32:c1:d8:
                    ab:e1:08:9c:fc:dd:37:5a:84:5a:9d:87:c6:38:f2:
                    d9:f5:cf:cb:e1:92:13:e4:65:9c:33:a4:b5:0f:57:
                    14:2c:f8:74:44:dc:a7:a6:25:d8:8b:54:9e:23:bc:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F8:94:AC:AF:65:EE:84:CC:14:F6:17:90:0D:E2:9E:DD:4E:F3:08
            X509v3 Authority Key Identifier:
                keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/BFECDAAC803F11EC8394C23AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.240.0/22
                IPv6:
                  2400:ffc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:b5:5d:e5:4d:b8:2d:41:0d:24:fe:11:5c:80:b9:1e:6c:1c:
         e6:64:73:52:9f:29:b5:0d:6a:38:71:92:7f:d2:6d:bf:90:9b:
         0d:14:fe:aa:d2:25:d0:33:66:50:76:32:6d:90:76:08:36:fb:
         ca:60:99:8d:5c:f0:52:65:2e:56:7f:93:46:69:f0:b0:ad:12:
         3b:5b:08:d3:e0:d3:3b:e0:ce:f8:bd:18:7b:f7:88:1d:1d:cb:
         89:28:ab:d2:dc:28:02:ad:a9:eb:60:b8:42:f6:d3:6c:bd:d3:
         94:a2:24:44:7a:12:cc:17:3f:a2:4d:84:fb:bc:86:c6:1e:fe:
         11:40:45:97:a7:7a:1a:e4:db:65:5e:64:da:68:4d:03:90:71:
         a5:1d:c7:4f:90:e0:66:ac:23:32:18:ed:d9:a7:82:31:6c:02:
         0f:d3:a0:68:11:5c:00:e9:52:e9:dc:eb:4a:17:43:8f:55:d3:
         8d:73:c9:a8:47:23:0d:f8:a9:02:f6:36:0f:e6:03:82:f9:84:
         3e:9f:26:da:98:2c:b8:94:20:1a:83:a7:b5:b8:70:be:a4:10:
         4f:1c:4d:f8:9f:7a:ad:8c:1c:a6:cb:0b:17:c1:77:6d:79:3e:
         b2:4b:0d:94:89:fb:4b:1d:8c:1b:a9:ec:9a:18:f0:59:7c:bc:
         79:35:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:05 2026 by rpki-client